Bump shakapacker from 6.6.0 to 9.3.2

[dependabot]

Bumps shakapacker from 6.6.0 to 9.3.2.

Changelog

Sourced from shakapacker's changelog.

• For the changelog of versions prior to v6, see the 5.x stable branch of rails/webpacker.
• Please see the v9 Upgrade Guide for upgrading to version 9 and accounting for breaking changes.
• Please see the v8 Upgrade Guide for upgrading to version 8 and accounting for breaking changes.
• Please see the v7 Upgrade Guide for upgrading to new spelling in version 7.
• Please see the v6 Upgrade Guide to go from versions prior to v6.
• ShakaCode offers support for upgrading from Webpacker or using Shakapacker. If interested, contact Justin Gordon, justin@shakacode.com.

Versions

[Unreleased]

Changes since the last non-beta release.

Fixed

• Use @ts-ignore to suppress potential import error in public types when webpack is not installed. [PR #828](shakacode/shakapacker#828) by [G-Rath]

[v9.3.1] - November 9, 2025

Fixed

• Fixed NODE_ENV not being set when running shakapacker-dev-server. [PR #823](shakacode/shakapacker#823) by Seifeldin7. Resolves #802. The dev server now properly initializes NODE_ENV to match RAILS_ENV (or "production" by default), fixing webpack configurations that dynamically load environment-specific files.
• Extended manifest merging for multiple client configurations to all environments. [PR #800](shakacode/shakapacker#800) by Judahmeek.

Added

• Support for css_modules_export_mode configuration option. [PR #817](shakacode/shakapacker#817) by justin808. Adds css_modules_export_mode setting in shakapacker.yml to control CSS Modules export style. Set to "named" (default, v9+ behavior with true named exports) or "default" (v8 behavior with default export object). Allows teams to opt into v8-style exports for easier migration from v8 or when using TypeScript with strict type checking.
• Configuration#data public API method with enhanced documentation and safety. [PR #818](shakacode/shakapacker#818) by justin808. The Configuration#data method is now part of the public Ruby API, providing stable access to raw configuration data. Returns a frozen hash with symbolized keys to prevent accidental mutations. Includes comprehensive test coverage and detailed RDoc documentation.
• Support for javascript_transpiler: 'none' for completely custom webpack configurations. [PR #799](shakacode/shakapacker#799) by justin808. Allows users with custom webpack configs to skip Shakapacker's transpiler setup and validation by setting javascript_transpiler: 'none' in shakapacker.yml. Useful when managing transpilation entirely outside of Shakapacker's defaults.

[v9.3.0] - November 2, 2025

Fixed

• Enhanced error handling for better security and debugging. [PR #786](shakacode/shakapacker#786) by justin808.
  • Path validation now properly reports permission errors instead of silently handling them
  • Module loading errors now include original error context for easier troubleshooting
  • Improved security by only catching ENOENT errors in path resolution, rethrowing permission and access errors
  • Better type safety with custom ErrorWithCause interface and optional chaining for error.code checks
• Improved type safety and error handling in configExporter module. [PR #778](shakacode/shakapacker#778) by justin808. Resolves #707.
  • Enhanced type safety across configFile, buildValidator, and yamlSerializer modules
  • Improved error message preservation for webpack/rspack build failures
  • Fixed edge cases in YAML serialization (empty arrays, malformed objects)
  • More robust constructor name detection for object serialization
  • Better handling of Symbol, BigInt, and edge case types
• Default template no longer triggers production warning. [PR #774](shakacode/shakapacker#774) by justin808. Fixes #703.
  • Changed default useContentHash to true in shakapacker.yml template
  • Eliminates confusing warning about useContentHash: false not being allowed in production
  • Development environment now explicitly sets useContentHash: false for faster builds
  • Production no longer needs explicit override since it inherits the correct default

... (truncated)

Commits

• e29fabc Release 9.3.2
• c7af518 Add assets_bundler to config if missing during bundler switch (#833)
• b737dbb Simplify switch_bundler task to only support rake command (#831)
• e888599 Update Prettier to 3.6.2 and fix formatting (#834)
• c2da472 Add support for esbuild 0.26 and 0.27 (#832)
• 7e3e062 Rake tasks should be called with rake, instead of rails (#830)
• 2f7978e Add CodeRabbit as Supporter (#829)
• 787d9f2 fix: use @ts-ignore instead of @ts-expect-error in public types (#828)
• 9af7271 Improve CSS Modules backward compatibility documentation (#809) (#810)
• 1c13a1a Update CHANGELOG.md for 9.3.1 (#824)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)